Skip to content
OpenAdvisories

Package · PyPI

elastic-apm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2021-37941

    APM Java Agent Local Privilege Escalation

    A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to…

    Elastic APM Java Agent elastic-apm PyPI
  • High 7.2
    CVE-2019-7617

    Elastic APM agent for Python client CGI proxy redirection flaw

    When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choo…

    Elastic Elastic APM agent for Python elastic-apm PyPI